nneonneo

3 ms·

1.
by nneonneo 21d ago
The problem is that JXL has a ridiculously versatile modular mode which enables high-complexity “prediction” computations. These were designed to encode reusable, custom predictors that could reduce the prediction error and thus the number
2.
by nneonneo 21d ago
Probably not; for PNG, the image size is declared in the header, so a decoder can decide immediately if it wants to decode the image or not. The output is bounded by the size of the image times the bit depth, and decompression runs in time
3.
by nneonneo 21d ago
Worth noting that this progressive AVIF, when viewed in Chrome, has only two states: a "base layer" which pops in around 8KB, and the full image which appears 270KB later. The comparison JXL continues to refine during most of the
4.
by nneonneo 21d ago
That JPEG XL prime computation is a pretty ugly DoS. Just selecting it in Finder, with the preview pane open, maxed out every core on my Mac inside a QuickLookSatellite that also ate 4GB of RAM while doing so - for a good 15 seconds. Not ba
5.
by nneonneo 1mo ago
It seems like the right thing they should do is discontinue new registrations but continue to honour existing ones (+ continuing to reserve any 2LD that has a 3LD registered on top). It’s a bit insane that they can decide to just terminat
6.
by nneonneo 1mo ago
Since neither smith.name nor the wildcard *.name appear in the Public Suffix List ( https://publicsuffix.org/ ), browsers would likely allow any page on a *.smith.name domain to set cookies for .smith.name. There was an eff
7.
by nneonneo 1mo ago
Thanks, good call. I posted this partly hoping that one of those status sites could add IPv6 testing as a feature, but that’s probably asking too much :)
8.
by nneonneo 1mo ago
The kernel folks likely have a good profile on what page people trigger Anubis on (i.e. what page people hit first). From that they could make heuristics about what pages are likely to be useful deep links. Keep in mind that Anubis will rar
9.
by nneonneo 1mo ago
I disagree. The kernel finds it effective - 66% of scrapers are turned away directly. The scraper problem now is fleets of residential proxy devices - often things like smart TVs, phones, and browsers with some “proxy SDK” installed as part
10.
by nneonneo 1mo ago
I wonder if one solution here could be to turn up Anubis difficulty if the first page hit is not one of the obvious entry-points to cgit. It could even have a little hint that says something to the effect of “go visit the home page if thi
11.
Tell HN: HN's IPv6 address is down
7 points by nneonneo 1mo ago|6 comments
12.
by nneonneo 1mo ago
I made a CTF problem where `assert` was used as a critical safety check - and where "accidentally" running the program under -O (for speed!) resulted in a security vulnerability. A large fraction of the people who attempted the pr
13.
by nneonneo 1mo ago
The __debug__ constant is really weird - any block of code guarded with `if __debug__:` will be entirely omitted from the bytecode under PYTHONOPTIMIZE=1. This and `assert` are the only two examples of real “conditional compilation” in Py
14.
by nneonneo 1mo ago
Did they actually use this phrase in their internal comms? The one reference I can find - https://www.justice.gov/sites/default/files/atr/legacy/2006/... - says that Steven McGeady (then VP of
15.
by nneonneo 1mo ago
Figure 1a (the leftmost subfigure in TFA’s lead image) shows the data for Uzbekistan from the DOSEv1 dataset (green), DOSEv2 dataset (red) and World Bank (black). The authors of the retracted study used the DOSEv2 dataset in order to model
16.
by nneonneo 1mo ago
Only the first one is fully standards-compliant C; the others all invoke some non-standard (but widely-accepted) features. (I believe empty unions - and their interpretation as being 0-sized - are non-standard in C, but I am not 100% sure.)
17.
by nneonneo 2mo ago
Some of the previous editions came with explainers, but this one doesn't, so here's what's going on: `void main() void;`: Despite sort of looking like an independent declaration (which threw me for a loop initially), this is
18.
by nneonneo 2mo ago
Something that Python gets right is that their entire docs site is versioned - select 2.7.18, for example, and you get the 2.7 docs right down to the tutorial. The Python development process is also very careful about keeping documentatio
19.
by nneonneo 2mo ago
For highly complex technologies that require tons of capex to get anywhere, Chinese firms are perfectly happy to depend on foreign companies if they are allowed to. Chinese chipmakers weren't willing to use the first batch of domestic
20.
by nneonneo 2mo ago
The biggest problem I find with AI writing is that it overemphasizes everything - making absolutely everything it does sound incredibly important and critical. This is very, very exhausting for humans to read, and I would not be surprised
21.
by nneonneo 2mo ago
Yep! Then you’ll never need to train any students ever again. So…are you planning to hire only seniors who already know everything? Where do these seniors come from?
22.
by nneonneo 2mo ago
Rejection works when there are multiple tiers of venues; authors often “give up” on a venue if it seems like their work isn’t getting in, which allows higher-tier conferences to maintain a lower accept rate and take only the “best” research
23.
by nneonneo 2mo ago
The "Chinese social credit" system is vastly overblown. I'm living here (China, Beijing and Jiangsu) now, and there are exactly two cases in the past eight months where the "social credit" system has had any impact
24.
by nneonneo 2mo ago
At this point, in the field of AI research: - papers are written by AI (as pointed out in this article, and as obvious to anyone who spends a while actually reading recent AI research) - papers are reviewed by AI (NeurIPS is doing an AI ass
25.
by nneonneo 2mo ago
Well, that's too bad; as the main developer of https://github.com/nneonneo/ghidra-wasm-plugin it would have been really nice to get better support for all the new features that have been added into the spec over t
26.
by nneonneo 2mo ago
This exact technique has been around for a while; there are even government resources warning about it (e.g. https://www.michigan.gov/msp/divisions/intel-ops/cyber/mc3/c... - April 2025). As you mig
27.
by nneonneo 2mo ago
The remaining risk now is that a patient, malicious actor could put out a new, clean source-only release, wait for ~7 days for people to decide it's safe and update to that version (and pass typical update delay controls), and then att
28.
by nneonneo 2mo ago
Oh and one little thing - the first input should be Graphic+Shift+M, not Graphic+Shift+=. (The later mention of Graphic+Shift+= when I test the codes is still correct). I corrected this in my Mastodon reply but couldn’t edit my HN comment a
29.
by nneonneo 2mo ago
I believe the argument is that the passthrough fees can vary by location in a way that makes it hard to produce a precise fee calculation on promotional material. As a random example, it's plausible that a local government could charge
30.
by nneonneo 2mo ago
Yes, I'd be happy if you did so! I tried adding a reply but since I don't yet have a Mastodon account (hopefully soon to be resolved), I resorted to just posting here instead. Here's the decode script I used to produce the ta

More ›